The Personal Data Protection Act (PDPA) Malaysia that came to effect on November 15, 2013, was established to protect the personal data of citizens of Malaysia. The purpose of introducing the framework was to the commercial processing of personal data and building confidence in consumers overthe use of their data. It applies to any business, organization, and website in Malaysia that commercially deals with the processing of personal data. However, the applicability is restricted to the private sector and does not apply to the public sector, federal, or state governments. Enforced by the Department of Personal Data Protection (PDP) as the acting and responsible authority in Malaysia for implementing and executing PDPA 2010 laws ensure compliance in the country. The Malaysian PDPA requires organizations to obtain end-user consent and also inform Malaysian users about the data processing activity. The regulation empowers Malaysian residents with several rights including the right to access, right to correct right to withdraw consent, and right to object to processing based on the damage that it may cause and prevent direct marketing campaigns. Learn more about PDPA Malaysia.
Our team will help you identify and understand appropriate cloud platform models: IAAS, PAAS, SAAS, etc. We further support your management in Scope Definition which includes setting timelines, responsibilities, and budget for the implementation.
The Personal Data Protection Act (PDPA) Malaysia that was introduced in 2010, officially came into effect on November 15, 2013.
Businesses and organizations in Malaysia that process personal data for commercial transactions including activities like service, investment, trading, banking & finance, and insurance are required to comply with PDPA Malaysia.
The PDPA Malaysia Compliance is exempted for the public sector, federal or state governments, credit reporting agencies, processed by individuals or organizations for non-commercial transactions, or processed for personal, family, or house affairs.
PDPA Compliance cost for an average-sized company starts at $8000. Pricing for PDPA Compliance usually depends on several factors, including the Scope of Audit, Business Applications, Technology Platforms, Number of Locations, and other additional services.
The PDPA Compliance report is only valid for a year from the date of issue. Further, an audit should be performed annually, or at least when significant changes are introduced that may impact systems and control in an environment.
Data ‘hacks’ and data privacy breaches of well-known companies
VISTA InfoSec LLC,347 Fifth Ave,
Suite 1402-526, New York, NY 10016
Enquire Now